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Listing of Claims : 

Claims 1-29 (Canceled) . 

30, (Currently Amended) A database management apparatus 
comprising: 

a database storage unit which stores a database comprising a 
plurality of records^, each record including a plurality of data 
5 segments identified by item category titles that identify 
respective categories of the data segments; 

an item category title storin g unit memory for storing at 
least one item category title for specifying a corresponding at 
least one data segment group as a target of a data search 
10 process; 

a key data scoring unit memory for storing keys for use in 
encryption associated with the database, wherein the keys 
comprise a column key corresponding to the at least one data 
segment group specified by the at least one stored item category 
15 title, and a plurality of different row keys corresponding 
respectively to the records of the database; 

an encryption unit for encrypting: (i) the data segments of 
said at least one specified data segment group that is the target 
of the data search process using the lUiiebpondin g column key 
20 corresponding to the at least one specified data segment group , 
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and (ii) data segments of at least one data segment group 
corresponding to item category titles other than the stored item 
category tit leg title , in units corresponding to the records, 
using the different row keys of the respective records; 

25 a functional unit which encrypts a received data set 

comprising a search process condition using the corresponding 
column key; and 

a database search unit which performs the data search 
process by comparing the encrypted search process condition with 

30 the encrypted data segments of said at least one specified group; 

wherein the encryption unit sequentially generates vectors 
in a multidimensional space based on a set of predetermined 
functions f and the data segments are encrypted in accordance with 
an encryption method in which components of the sequentially 

35 generated vectors form a key stream of a key associated with the 
encryption method; and 

wherein the row keys and the column key specify constants of 
the functions . 

Claims 31 and 32 (Canceled) . 

33. (Currently Amended) A database system comprising a 
first information processor terminal storing a database, and a 
second information processor terminal which is connected to the 
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first information processor terminal via a network and which is 
5 adapted to send a request to the first information processor 

terminal for conducting a search process in the database, wherein 
the first information processor terminal comprises: 

a functional unit which encrypts: (i) data segments 
forming data segment groups corresponding to column item category 

10 titles of a first kind using a same column key common to for said 
data segments forming the data segment groups^ and [[ f ]] (ii) 
data segments forming data segment groups corresponding to column 
item category titles of a second kind, in units of rows of data 
segments, using respective row keys, said item category titles 

15 identifying respective categories of the data segments; 

wherein the second information processor terminal comprises: 
a transmitting unit which transfers via the network 
[[,]] an encrypted data set representing conditions to be used 
for the search process in the first information processor 

20 terminal, when the second information processor terminal requests 
the first information processor terminal to perform the search 
process on the database, said encrypted data set being formed by 
encrypting an input data set specifying the conditions of the 
search process by using the column key; 

25 wherein the first information processor terminal further 

comprises; 
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a search performing unit that performs the search 
process on the encrypted database, based on the transmitted 
encrypted data set; and 
30 a returning unit that returns an encrypted result data 

set resulting from the search process, to the second information 
processing terminal via the network; 

wherein the e ncryption functional unit sequentially 
generates vectors in a multidimensional space based on a set of 
35 predetermined functions, and the data segments are encrypted in 
accordance with an encryption method in which components of the 
sequentially generated vectors form a key stream of a key 
associated with the encryption method; and 

wherein the row keys and the column key specify constants of 
40 the functions. 

34. (Currently Amended) A database management apparatus 
comprising : 

a key specification storin g unit that memorizes memory for 
storing data specifying a type of encryption system to be used to 
5 encrypt data segments of each column of a database, if the column 
of the database is to be encrypted; 

a first encryption unit that encrypts in accordance with the 
data stored by in the key specification 3 boring unit memory : (i) 
data segments forming data segment groups corresponding to column 
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10 item category titles of a first kind using a same column key for 
said data segments forming the data segment groups , and (ii) data 
segments forming data segment groups corresponding to column item 
category titles of a second kind, in units of rows of the 
database, using row keys respectively specified for each of the 
15 rows, said item category titles identifying respective categories 
of the data segments; 

a second encryption unit that encrypts, using a basic key, 
all of the row keys used by the first encryption unit; 

a key data generating unit that generates the column key, 
20 the row keys and the basic key; and 

a storing operation unit which stores in a memory the 
database after encryption by the first encryption unit and the 
row keys after encryption by the second encryption unit, in a 
mutually associated manner; 
25 wherein the row keys are each generated based on a number of 

the respective rows and a random number; 

wherein a vector generation unit sequentially generates 
vect o r vectors confined to a closed subspace of an n-dimensional 
space and defined by functions based on the keys; and 

wherein a logical operation unit performs a logical 
5 operation in units of a bit involving both the data segments of 
the database and components of the vectors generated by the 
vector generation unit, to encrypt the data segments. 
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Claims 35 and 36 (Canceled) . 

37. (Currently Amended) A method for managing a database 
system including a first terminal unit for managing the database 
and a second terminal unit for searching the database 
independently of the first terminal unit, said method comprising: 
5 encrypting the database by encrypting, on a first terminal 

side of the system: (i) data segments forming data segment groups 
corresponding to column item category titles of a first kind 
using a same column key for said data segments forming the data 
segment groups , (ii) data segments forming data segment groups 

10 corresponding to column item category titles of a second kind, in 
units of rows of the database, using imw row keys respectively 
specified for each of the rows, and (iii) all of the row keys, 
using another key, said item category titles identifying 
respective categories of the data segments; 

15 storing, at the first terminal unit side of the system, the 

encrypted database on portable storage medium units for 
distribution; and 

searching the encrypted database stored on any of the 
distributed storage medium units, decrypting a data set obtained 

20 as a search results and displaying the decrypted data set at a 
second terminal unit side of the system; 
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wherein the row keys are each generated based on a number of 
the respective rows and a random number; 

wherein a vector generation unit sequentially generates 
v ec tor vectors confined to a closed subspace of an n-dimensional 
space and defined by functions based on the keys; and 

wherein a logical operation unit performs a logical 
5 operation in units of a bit involving both the data segments of 
the database and components of the vectors generated by the 
vector generation unit, to encrypt the data segments. 

38. (Previously Presented) The database management method 
according to claim 37, wherein each of the storage medium units 
stores both the encrypted database generated by the first 
terminal unit, and a predetermined application program for 
performing a searching process on the encrypted database - 

Claim 39 (Canceled) . 

40* (Currently Amended) A database management apparatus, 
comprising: 

a database storage unit which stores a database comprising a 
plurality of records, each record including a plurality of data 
5 segments identified by item category titles that identify 
respective categories of the data segments; 
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an item category title storing unit memory for storing at 
least one item category title for specifying a corresponding at 
least one data segment group as a target of a data search 
10 process ; 

a key data storing unit memory for storing keys for use in 
encryption associated with the database, wherein the keys 
comprise a column key corresponding to -the said at least one data 
segment group specified by the at least one stored item category 

15 title, and a plurality of different row keys corresponding 
respectively to the records of the database; and 

an encryption unit for encrypting: (i) the data segments of 
said at least one specified data segment group that is the target 
of the data search process using the uui responding column key 

20 corresponding to the at least one specified data segmen t group, 
and (ii) data segments of at least one data segment group 
corresponding to item category titles other than the at least one 
stored item category titl e s title , in units corresponding to the 
records, using the differ e nt row keys of the resp e ctive records, 

25 using the different row keys corresponding to the respective 

records and another column key that is assigned commonly to the 
data segment groups corresponding to item category titles other 
than the at least one stored item category title; 

wherein the encryption unit sequentially generates vectors 

30 in a multidimensional space based on a set of predetermined 
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functions, and the data segments are encrypted in accordance with 
an encryption method in which components of the sequentially 
generated vectors form a key stream of a key associated with the 
encryption method; and 
35 wherein the row keys and at least one of the column keys 

specify constants of the functions. 

41. (Currently Amended) A computer program for directing a 
computer to execute functions comprising: 

accessing a database comprising a plurality of records, each 
record including a plurality of data segments identified by item 
5 category titles that identify respective categories of the data 
segments ; 

storing at least one item category title for specifying a 
corresponding at least one data segment group as a target of a 
data search process; 

10 storing keys ryr for use in encryption associated with the 

database, wherein the keys comprise a column key corresponding to 
said at least one data segment group specified by the at least 
one stored item category title, and a plurality of different row 
keys corresponding respectively to the records of the database; 

15 and 

encrypting: (i) the data segments of said at least one 
specified data segment group that is the target of the data 
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search process using the column key corresponding to the at least 
one specified data segment group, and (ii) data segments of at 

20 least one data segment group corresponding to item category 
titles other than the at least trhe one stored item category 
titles title , in units corresponding to the records, using the 
different row keys of the respective records; 

wherein th e encryption unit se q uentially generat e s - vectors 

25 are sequentially generated in a multidimensional space based on a 
set of predetermined functions, and the data segments are 
encrypted in accordance with an encryption method in which 
components of the sequentially generated vectors form a key 
stream of a key associated with the encryption method; and 

30 wherein the row keys and the column key specify constants of 

the functions. 

42. (Currently Amended) A computer program for directing a 
computer to execute functions comprising: 

storing , in a key specification memory, data specifying a 
type of encryption system to be used to encrypt data segments of 
5 each column of a database, if the column of the database is to be 
encrypted; 

first encrypting in accordance with the data stored by in 
the key specification memory: (i) data segments forming data 
segment groups corresponding to column item category titles of a 
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10 first kind using a same column key for said data segments forming 
the data segment groups, and (ii) data segments forming data 
segment groups corresponding to column item category titles of -a 
first — kind using a same column key, — and data -segments — formin g 
data s e gment groups corresponding to column item titles of a 
15 second kind, in units of rows of the database, using row keys 

respectively specified for each of the rows, said item category 
titles identifying respective categories of the data segments; 

second encrypting, with a basic key, all the row keys; and 
storing in a memory the database after the encryption 
20 thereof and the row keys after encryption the encryption thereof, 
in a mutually associated manner; 

wherein the row keys are each generated based on a number of 
the respective rows and a random number; 

wherein a vector generation unit s e qu e ntially generat e s 
25 vector vectors are sequentially generated that are confined to a 
closed subspace of an n-dimensional space and defined by 
functions based on the keys; and 

wherein a logical o pe ration unit perf o rms a logical 
operation is performed in units of a bit involving both the data 
30 segments of the database and components of the vectors generated 
by the - v e cLor generation unit, to encrypt the data segments. 
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